BSA-2016-003

Summary Security Advisory ID : BSA-2016-003 Component : glibc Revision : 1.0 N/A...

CVE-2016-1986

HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Framework Session package Arbitrary Code Execution Vulnerability

Joomla! Framework is the U.S. Open Source Matters team developed a set of Web applications written in PHP framework , Session is one of the packages used for the session layer . A security vulnerability exists in the Joomla! Framework Session package version 1.3.1 prior to version 1.x. A remote...

UBUNTU-CVE-2015-4515

Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message...

VulnCheck KEV: CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...

Moxa SoftCMS Buffer Overflow Vulnerability

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Buffer overflow vulnerabilities exist in Moxa SoftCMS version 1.3 and earlier. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Wireshark 'epan/packet.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the dissector-table implementation in the epan/packet.c file in Wireshark versions 1.12.7 prior to 1.12.x. The vulnerability can be exploited to...

UBUNTU-CVE-2015-6243

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...

IBM MQ Light Denial of Service Vulnerability (CNVD-2015-05120)

IBM MQ Light is a messaging service from IBM USA based on IBM Bluemix, a PaaS platform for creating, deploying and managing applications on the cloud. A security vulnerability exists in IBM MQ Light versions 1.0 and 1.0.0.1 due to the program failing to properly handle authentication credentials....

Research Artisan Lite Cross-Site Scripting Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A cross-site scripting vulnerability exists in Research Artisan Lite versions prior to 1.18. The vulnerability can be exploited by remote attackers to inject...

Cisco Identity Services Engine Security Bypass Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security bypass...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the krb5-debuginfo-1.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the minicom-1.83.1 operating system from Red Hat Linux can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

EMC PowerPath Virtual Appliance Information Disclosure Vulnerability

EMC PowerPath Virtual Appliance aka vApp is a host-based path optimization software from EMC. The software provides automated data path management, failover and recovery, and load balancing optimization in both physical and virtual environments. A security vulnerability exists in EMC PowerPath...

PT-2015-4258 · D Link · D-Link Dcs-2103

Name of the Vulnerable Software and Affected Versions: D-link IP camera DCS-2103 versions prior to 1.20 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING to "vb.htm". Recommendations: For versions prior to 1.20, updat...

SUSE-SU-2015:0653-1 Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues. These security issues have been fixed: SigComp UDVM buffer overflow CVE-2014-8710. AMQP dissector crash CVE-2014-8711. NCP dissector crashes CVE-2014-8712, CVE-2014-8713. TN5250 infinite loops CVE-2014-8714. This...

DEBIAN-CVE-2014-0222

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...

CVE-2013-4537

The ssisdtransfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image...

Qemu: qcow1: validate L2 table size to avoid integer overflows

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...